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1 

±gB / ^ 'J ^© (CiEtgS tlT -5 5^- ^ {C:3 V^T ©If $g 

JS^bTJLfB1f$S«afflV7 h-^XT^S^frb, JbtB^* 20 
^ ® rt— tf 5^- :57 te^^t LTte A »C J: S fijffl <^ Ra±-r 

[«*JS3] BufB1t$g«ttffly7 h'i7X7*^, BfrlB;^^ 

m^T^^tiz^o, ^^(D:i—*f^—^^i&mm.{zm 
m 3 ©f5jn74MCBB«©«g^«*gM. 

B^lfBx-^^!!lS#©75i, ±IB1«$g«afflyy h':7X7'^ 
^fT-r^::tlCj;0, ±EB:i— tf5r-iS'^teg®(-jiS^ 50 
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m 1 3 (DHnt^z%m(Dmmi^^^m. 

t-t^m^m^ ^tz\m^ms\z%m(Dm^^^mm.o 
^\z^-oTm%^=L—^'f—^^m.mit-^-^^z.t^(^WL 

[|»3K:S8] MtBlffg^SSdc^-yt-vWSltRttCmi 

^m^m 1 ~M*JS 7 ®<sin*^{cfB«co^:^^*ggo 

^^a*OR^^#75i. ±tB-fe4^;i.U5=-i'^JWSeic>t>|-b 

T±tzm^^m \ztb^ m^m^-^ \zmmt^-x7-v-:f 

±tB1f?S#S^>;/-fe->'<£§mbfc^^«*:^t. 
[fi^^ 1 0 ] mffB-Ir^;r U 5^^- ym'^Wifi. -hlB't*^ 

-siws.v^m.\zh^z.t.^m&\.-z. HuiB«?s«s^^^ 

iSS S-M* S tifc^^S* (c ^ ^T* >y h y - ^7 (c 

-^mrmmz^-otzM^. ±tB*«s^*t««iiaftPi 

§ * 3f S © ^ L /-^ - > T-IS 0 MT <fc S #M <h T -5 

if 1 0 tciB«o^^>ffi*i«$sisa;^ffi. 
Y'o->? \z'^m.^md^mmp.'f-'^mmm.m.\zn u 

±tBPn^^-fr>£Stt^c#li!)5S*5^-^'gSgS*^. ±IBS| 

^)S*o©:siggi®wii^±iB-t:^i u U'mm.m.\z 

«. ±IBS?^jS5^{C^UT«ffi,Pa^^-&^St-tfc d i ^SB 
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3 

m^nfzmmtt^^L^y'^'em-T-^ti.xmzmm 10 

a$JS-rci:Sr#||l(<i:-r^gi*^9~li5l<:^l 4©f5Tn 

$iJI9»a*i, BulBltma^^^ >;/-Ir-S7ctJ{c±fB7 r 
±fB1t$S«aj^->-tr->'*§fiLrc»^*Sg5^*t, gft^ 

•r^:<h$#Si[i:-r.2.ltlt^^9~||*]5l 4©Hn;^MclB 

7] m[tB1*$gffi«^^;*-i'-t-v^&§fILfc 
^^SSs*/&«. »a*f*i:f<£t3fcmisBR)T^©:i— tf1f$S& 40 

[it*^18] milB1f$g«aii&^^>;/-fe->;^S«bfc 
««*f#i:fj:oitHfllBm^C0ZL-if1f$S* 
±tB ^< -y -tr - v 4" Tfg^ S nfcBf^fi Ic J; o XW-^^t: U 

tTSWsRJSl 7 iciB««^«iSg*«#g«sS;^*. 
[fi^Jll 9] HfIIB'ltlS{Sa#'^^>;/-fe— >'^§mb;t 50 
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M<t-r^«*JS9~Bi*:«l 8 ®f5itl*MctBm©^SS 

«^S^*75^ «S*f*<t;5:-s>fcHtitBm^«:i-— tflf^Sic 
x-:S'^^SrJi-r^:i{CJ:-pX, <fiA©?iJ^^Sih-r-5 
CltS:!i*mi:-rs«*JS9~IS*3ai 8 «^srn/&MCtB^ 

mim. mB<&fijfflbxfT*3tiscit^#ti.h-r-5if* 
Mm^'yhu-'^izmm-snrz±^=Ltj^^mmmmt 

X. ifB-b^zLUT^^-WaT^-^^tcao'ViXT^-^ffiS 

^irLTm'^m^^mzmm-r^tzaxD:^ 'y±:-i^±^ 

m^mT-^mLrcy'-i$'^m^^^ y -tr -->*(:: jt:;^Lx 
±135="— ^Ma^®izJ;-r5XllfT-r^##ffly:7 hr^x 

^LfcfHAigiElf fStffilB-t^^^i U 5^^'^a5^-^' i L 
X^*e)l^®$nxt.^seA|giEt*$g<i:ic»^'ViX±gB« 

W t $ nfc X - ^S' ^aMsR -r? V i X hJIIBt'- 

*^2 3{C|BiK(0^^iSg*©W?g^S->X7^A<, 
[W*«2 5) WtB-t4^iU5^^'*JW^BK);<-y-tr-i? 




Ac 

;iiS:il#ii[i:-r-Si»5R®2 3~i«^^2 5 OfpjnTiMCsB 

IBItSCDX-^'ClOViT. H5tB-fe:^^J.U7^-<$IJW^SI' 
2 3~ii^«2 6<Dfprn*^fCtB«CDai^)^5^<Dlt$S«S 

[0 0 0 1] 

[0 0 0 2] 30 
>>j/ (Personal Digital Assistants: PDA) , 

[0 0 0 3] :inb©»^^*^Mti, 

h^fc:Anj^*.M«n-5Aci*. i^i(j^4>TISM{CjaiI 
U?t}i?TflA«#i;iit-2>tS#7St*ix.. S*$l®F*g{ctBti 

t-r?)t, ->X^Afflil75^e./lX'7— HWA 50 



#M¥9-2 15 0 5 7 
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[0 0 0 4] 

[%Bj;5t)!^^b<t5tr^i$ffl] si^a^ts, ±<hLT 

■teA(CJLe>nTH75:e;^i:l.i1t^g-Tr$.-DTfe, ¥ 

Sffi*ORlf*#;0t, S^rtOT^SIf^fcOV^TflfiAlCck-S 
[0 0 0 5] *^BJ(DBS<)«. S^S^^i^^LfcPt. 

KjSS* ICS $ tlfeSff t -p Tfiil;^rL— if If ^ $r 

«»^Bt Se^* n/tm^r# IC t o Tag:^j::l- 

<75«S::^ffit5j:tJCi^5^1»$6«a->X5=-A^ii«-r-5 d .t 
[0 0 0 6] 

[^^S:««fc-r-57tfe©^g:] ±fBB6?)*5iJ5£-rSfc 
*^BJ©i«^S^*1»$g«S:^ffi43j;u:«if->X7^A 

LT^^!^3l5{cjt{f ±IB1tf6««/-y-{r— >*^§fi 

-3i/iTffiA©^ijffl$:ia±t"^fcje)<Dx-:S'5aa^srSs-rj; 
[0 0 0 7] *^BJ©|^M0iJ^cJ;n^^, ±fB-t^3.>j^ 




[0 0 0 8] *!^BJ(ci5ViT, Jilfi-fe4^^ U T^-T '^St' 
^' *-fe^ ij 5^^- $tJiai^S(rlE^ bT^D < d t tc J; 

-r^lf ^^^^^^ -^/-t— :^tc±sSIIIiE«$B*aS^ LT 
tc^*^^ 5 nx S ignite i: tcSo'ViT ±IHSfi ^ 

[0 0 0 9] ^mmizj:^mm^m\t. rnmmm^^ 
-fe - V ^ mm.mn t ±seiBtt ^® ^d^iBtt l 

fc«?)K)R)?^rox-^S'j!!lii^«MS:IBa!Lfctffg«Sffly7 50 
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T^llfirL. ±IB#^CD3.— tf-r-5'^*l5ai^kLxteA 

[0 0 10] um-r^^=i—yr^-^:^!^^-r;^r^tt> 

1t?S®^<!:««1f$Stg^<h(Cii-WX*3^. 1f^««JitB 

^mmmmmzwm-^nx\^^^^—\f^-^iz-D\,^xB 
««^#! t -r ^ a.— tf X- © 7 T )immm^ ^ ^ 

i^ffi^U. ±t3>'r'f>iL'^SiJ1f^XW^$nfcn.— ?fx 
— ^'S:*xS'ft:T^J:'5tCbXt)ckti, if^^— 
ttJ^Sg<!:LX, ±iaiflBffittffly7 h'i/xT{cJ:t3. :x 
-- »fx-5'*Exi'ft;tc$feji-x)X, 3.— ^$-ft!i«^ 
g. ^sj^tS. ±IB1f^«ag*>^>;/-fe->70]3im7ntcS 
iiUb. ^X-^*m##«^7ctclHlJKX$-5.J;3{cUXfc 
iVio ClcDJS-g-. JhlBn-—- ^'^rBt^'ftbXfe^l-r 
-5<kplcL.XfcJ;Vi. 
[0 0 11] 

tfXDi^XT-A^i^m&^^To 0{C*3V^X. i«, 

ffl 5 ^^i.TmMmm-^ntcm^(nmmmmm 12(1 
2A~i2N) ii^mi^mmm^-^^i&mvrzy^-i^ 

X->X5^A1 1 i:/5^?>:i^j:-S.«^^->;/ h^ — i^, i o 
\t±mBM^ y h '7-i7 izmmitltc-t^=L Uy^^ziy 
hP-^ (-ir+i U -T^-r -9--;^) x^-5. 14 (14A 
~i 4M) i,t±timm^-'y hu—i7^mmT^^W}m^ 
x$>K). M'^fD^mmMmoimz. :^^mtm»t:t^ 
m^mm.^^ (£iT. mzm^^^h\'^^) t^in^o 

U—^ 1 tbXPHS (Personal Handy-phoneSys tem) 

^mm\^tLm^\z-D\^^xmmt-^. mum5\zu. 

L;5:^i3^1S^->;5!.5^A*^M.X, H^SS* 1 8 -^tooi^ 

iRmi§fflitffi3&^*j5^;$n-5. mu. -kiBM^^-;/ h^- 
[0 0 12] ±gB5^— ^^-Xi/XT^A (PHS->X5^ 
ADB) 1 KCtt. ^Wli^mm'my'-^iii.r, ^»)5g 

A<t^-&$nxv^^. •fe=^^iLU7^'(-3>hn-7 1 0 

Sl^iffi^l 4 0R(f*#;Jif,©-fe:^^iUT--f 

(c^SCx. ^^S*l 4©1f$g«Siri£xB;^-ir^3.'J7" 

>r«=ax— ^'$rS^Lx*3^, 1 8«?©®fiafi^ 

^. '?iie)i£gi$tlXVi^-t^3.'jT-'1'«=315r-^{CS-:? 



( 6 ) 



9 



<i:fcj:D#eti, mmum\t, m-mti^Mi 4\zmmum 
[0 0 13] 0 2«. m^^^(Dmmm\z^^±.^=L^) 

>hn-7 1 OtJ^iBc^n. -t+jL'J5^^'n>hD — ^ 10 
1 0CS®^*5 l;6^3^{iSn-5, -fe^i'J-?^' 3> h 
n-^ 1 0 «. ±fBS®S5tc5 1 ic^t:^LT^®§#lii 

6 1 SrHfTb, g5i?7C®«^^^ 1 4 ICl^^W 
5 2 5 j||#-r2><. M«SS*14«, ±IBSSl'tf^^;i^fC 

tl^SfiHf$6 5 3 i:LT-fe^a.U5"-i'n>hD — ^ 1 0 

ii^mm-r^ii. ^mmmm!^ 5 5 75^^^^^ 1 4 ^ 20 

-t+o-UT^-r =J> hD— ^ 1 Ofcjg#$n^. -fe+zL'j 

■T-^'n>hD-5 1 ott. ±nmmmmjts^^S:m-r^ 
m^'-iS'T—y'Mzmmv. m^^^i 4izmmoKu 
m^m^mx"b. ±se^gioKU'X>}?>x 5 6 

[0 0 14] EI3«, Sl^jffi^t-fe^^xUT^'f n> hD 
- ^ i: O fe^ -C® ft $ n^»«^*1f CO ^ -b - 

-^-y h 7 0^^-r. v*? v-:;;^ 30 

AID71, l(jf^ID72, 5^— 5'a73, t'— ^'1*!^ 
7 4 , *3 JxlXC R C (•y-'f i7 ij ^7 . ij yyyz^-^y— . 

I D 7 1 tCtt. ->-fe->'*^*^^*SH*tt?SiS^ffl® 
t)C7)Tfe-g)Cl<tS:S^Tn-H30^^S$n-g). I D 7 
2«. C(7)^-:/-tr->'®S!^<&*b. S^^5fc5 1. S 

^. x-^a7 3tt, ?Sigr«.5='-^l^$7^'-;UK 7 

4Wx— ii'aSrA'-r h^fi^T'S^L, CRC7 5«. 

I D7^'-;i'H 7 2*^?>5^-^'rt$:7^'-;i/K 7 4^T 40 

©X - ^ m 0 5^ X tr f ijffi $ n ^ . 

[0 0 15] a^S*5 1 tCfe^LT-t+iU-T-f :3> 

of}^ihmm^mzmm-^n^^mmmm>^>^ 

•;/-b:-v5 2(7)7'-:5'rt#7 4«. X— h . 

tLT-a-mfjimmms^mm^^m^mizm^-r^rci^ 
Aii. <i>ms§^m-:^^izii»^^jkm^^mx$>D. m^^ so 
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sg*i 4«. ^mmms 3 ^±iim^mA^m\^^x«s^ 

[0 0 16] ^mmm^v±-i^5 3(Dy'-^{fq^7 4 

gij I D 8 1 , mmi^^mmm^ s 2 . ^mm i d s 3 , 

ig|Elf$S8 4. 5!ia#^8 5, i5j;Z>'Bt^^^B : 8 6 ^ 

•5fli^s*^ii?txai-r, I D 8 3 mm^mBr 

^fr#<D I DTS)f3. -fe^^iUx^ n> ho — ^tt. 
#<i:-fe4^i'Jx'C«=ax-^'S:#^-r^o |gSE'l*f88 4 

ii!ia#^8 5«, ^mmm^moj^m^mTo m^ii. 
{ciHiJR mm.) bfcf^, s*®ffi^-rsif$gsrtg*-r-5> 

n > h a-^t^i^m^t^mzm.m-r^mn^fi§^^t-r^ 
rzmzm^^^n^. 

[0 0 17] ^moKUT^^y^. 5 eox— ^f^^7 4 
T-^ a > h u-^mx^i-fmf ibntzmmmn^^T. 

[0 0 18] 04tt. S^^I^#©7t46{C^mi^sl5{CS 

S^Sn^x-^ A;'7BiMcD 1 m^^T. 9 0 tilS^glS^ 
mm. 9 1 «^gltf ^A::*?®®, 9 2 ttRlfW#«g|f.®E 

^Kij-r^, ^mmi^mm9 oiziii^^x. ^-^-93 

rVES (ttli) J , FNO (.M^^) J (Dni^>iiim 

TYEs J 7ifiS'>^jis^-r-5. z.(Dmmz 
5 idijufi^n-s, ;s*5, ±$i'^wiy'(^)i-^ti^mm 




[0 0 19] mmmmxtimm9 nt. sE^i»$gg*^ 

■St. 7^— iS'F'i^? 4 .kLTx— ^7:+— V-;/ h 7 7 CD 

U^-'f n> hD— V 1 0{cj@l#$n-5o rL— tfjtigili® 
9 2«, ■fe:+3.'J-7^-i'r]>hD — ^ 1 0*^e,SgiOKl/ 
::^7t?>X 5 6 *§mbfcB#. ^^Mg^Str^s^^ti^iii® 

[0 0 2 0] 0 5ti, ^®i8lSP$IC-fe+3.U7^^ n> h 
n— ^ 1 0/&i||fT-r-5^!!ia:/nif^ACD7n— ^^-V'— h 
o)im^^T, :/D-y>:7 6i, 6 2, 6 3«, ^n^*n 

0 2 b fcsgi§#K){^ 6 1 . mmmm^HWii^ e 

(X7"!y:/i 0 1) fcafeo. mmmii-ftiit. niitmm 

(10 2) {CctoT^-^t^c^^iiaOiEf. >*75i 
§{tSn-2)t. ^>7-fe->'5'-iS' (XiJ^-iS') ^J-:r. 30 

(10 3) §<f ^•y-fe->'*^Sgig:*5 1 yO^S 
d^SrW^f-g) (10 4) M®^^5 lTS>n«, 
WS^^x-iS'S 2Srf^fiKb, ^^a*{Ciillfi (10 
6) bfc^, ^^(D^v^—i^Oi^m^W-D (10 7) , 

fIfiCjfliil 0 5$:fT-5. 
[0 0 2 1] v^t bTBt^iliAT?Bt^-ft:$ 

nfc^fin*?s 5 3 ^smr -S) t , ±bbb&^ii a t ^fsr 
ss>?SBt^ii*jifflbTsgtif$g^T^gg, mm {10 

8) bfcS. S^1f?g«SlgS*^'>-b->'5 4^&f^fieb 40 
T. Bl^iffi^tCiMfi (10 9) b, ^^OD^^-y-fe-v'CDS 
ff^^O (110), ±t2S@tt«g.M^^->'-fe-->* 
5 4(755^— ^F»?§7 4ICtt. -fe4^:i U ^--f 3 > h D — ^ 

1 OA^Sfibfeg®fi$B;< 5 3Wx-^|^g7 

bXS^ (1 1 3) b. Sg^OKU'X:lt>Xi£f^fi£bT 
SS^S^ici^fl-rs (114) M#t--5o ;J£*5. ^^SS 

5 3 <h[5lfil05='-i$'l^§$jt:5^-y-tr-->-$iim$i±. 50 
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iitKu (112) , -iScb^tJi^tc^gt^as (1 1 
3) b. ^-i!c©S-&ti, l^gi1t$SS*X5=--y:/ (1 0 
6) :^^e>MilfT-r^J:eiicbTt)J;ti„ 

[0 0 2 2] m&M. m^\^tzm^mM(Dm^mi3^ib, 

e#^*y'rir;i/b, •t4^3.'j^^r3>hD— 5 i otc 
« $r b v-x 7^ A « ftf^^ni ^ 

an^WliPS 1 : 134 ~S 5 : 138, iiJ^UW^-T 
-50 7 (CtJtt-Sffij'f^S 6:15 8~S 7:159 ^Hff 
-a-fe^^i Ut^-T n> hP — ^ 1 0CDl!)f^7D— — 

[0 0 2 3] mm^m(Dm^izm.m^rcm^mt^. mm 
mi 8-i:immm^^<Dmmm^^y-(^j\^T^ii im 

f^Ul : 1 3 1) . ■t+i'J5^^'n>hn — ^ 1 o t<D 

m-A^iE,^m-^n^v^mmmnti^umw^i 21 tr^^. 

-tr+iU7=--i'=i>hD-51 o#j-e«, ±t3#S^«^ 

SlftJS^^ ■;/-fe->^ (|g|iEffit^;< -k-v^) 1 2 2 b 
T, rsg#iDt#. ^-niC^I^-^ViTA'X 

■7— bT<fc$tij i:(/i^>rt^W^^^>>-fe 
— v<&ai:^-r^ (Slf^S 1 : 13 4, Ell Oa^Xv^-yy 
1 0 1-2 0 5) o 0f^#«, ±ge#^^-;/ir— 

•7- H^A:'3-r-5 (i!if^U2 : 13 2) . Ctl^cDXtl 
IgflT^-^' 1 2 3 i:bTj||ft$n-2). 
[0 0 2 4] -fe+i'JT-^ n> hn-^ 1 0 tt, JilBlg. 
1 2 3*§ti-r^<h, I Dhm—(D I D 

* 0-k + :i U 7^^- 'gST^-^ 1/ r] - h* SrM^ 

b. bfc/1X'7-h*75t^^^©|gIEl*#g8 4 i-a 
-r-i)*^S*^SW^b, 1t$6«^Wg*#*t§^$n;tA 
!^T$.^*$-flt^.bfc^, g*5ftigp^->-t->'l 2 4^ 
thtJ-f^ (Iftf^S 2 : 1 3 5. Ell 0®X7^-;/y2 0 6 
~ 2 0 8 ) o ±tES**tlg^ -jz-tr— V 1 2 4 «, ^Jx. 

tf. rR^*^?.ifig{s8iK(fp^F^$sbsro m^mm^ 

*S5tO?miS#^t#*t?:S'>*ff bT, b«6<*3#^< 

[0 0 2 5] m^^dt, •il^S-^A;^;t#7t^iS'>^f^ 
(iftf^U3 : 13 3) ffot. ■fe^^i'JT-'f =3> hD- 
PHS ->X-xADB 1 1 {Cjk*bT. -fe^zLU5^-i' 
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3:136.01 0(DX'ry':f2 09-^211) oPH 
S vy^-T-ADB 1 US, ±9B^SS* (12 7) 

n>hD-^ 1 oizmm-r^ (idf^N 1:139)0 

(0 0 2 6] i!:^:3.U5^^=3>hD-^ 1 Ott. 

i.rcmx\ mmwrn^-^i 2 9^mm-r^ (mips 4 

13 7, mi 0<DX9-yy2 1 2-2 1 4) -hlBlffS 

«is^^i 2 9^§fibfc^^^^*i 4\t. mmw^y 
uif^A^mnx^. ^.tit^-^T-r^h. ii^^^tciSCT^ 

hD-^ 1 0 tci^mr^ (idf^p 1 : 1 4 0) c 

[0 0 2 7] -fe^iLU^^3>hP-^ 1 Otl, Jilfiffi 

«S^-^l/rF-K^^*lt>#^tT^a (JI®^-^I3 20 
g) Ufcfg, 1f?gffiS(^*IT®^l 2 6^0^ (Iflf^S 
5 : 1 3 8, mi 0CDX^^yy2 15-2 0 8) # 
)gc^^;^7-r-i>o ±IS1f macD^Til^ 1 2 6tS. «SJ 

[0 0 2 8] i^. ±fB^M^JtC;feV^T, PHSi>X5^A 
N 1 JifBJ*^^^^^S* 12 7 tC^S^lxT, PH 

\yX^>Xl 2 8tCJ:-pT-tr^:xU5^^3>hD — ^tC 

^Lrcm!^.xm^^^^mm^m(D^mjz$>^r^m'^ 
iz. z.(Di^M:^mm^-y hu-^\z^m^mi.rz(D^i^ 4o 
mux. sawt^ti^g^sfi^^^^fT-r^^^tc^ssct 

[0 0 2 9] :icOcfc5i7^^i^*mw#^c7)i^*{iM 
ADB-\OiS*^m^^l 2 7 ^^BgU, gWSI^^* 
=i>ha-^1075^ ±tei(if^S 3tC4DV^T@&5i^*^ 

^nrzm^\zmips 4^m:n'r^.^o^zi.x^<^i^\ @ 
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[0 0 3 0] m7\t. m6x^i.rzmmum(Dm:M^^ 
mtmzmj^.x\ m^m^tiU^^%M.x^tsi^^^rzm^ 
(DWii^m^Tf^'r. m7 <Dmifzy^>xx\ phs'>;^ 

T^ADB 1 l;0^*-tr4^a.U^^n>hD-^ i 0 tcj^^S 
*^mi/X7p>X 1 2 8^iMfi-r^^Tc^^JiitS0 6 ^: 

fc^-^, PHS v-Xt^ADB 1 1#JT. ±IB^^ffi5^(7) 
IflBl/zi- Ft::. U =3 > H n — ^ i OTggS 
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ABSTRACT 



PROBLEM To offer an information protecting system and portable terminal which simplifies the use of 
the terminal during normal use, and enabling protection and removal of personal 
information remaining in the terminal when the terminal is lost. 



SOLUTION Security control data of a portable terminal 14 is registered in a security controller 10 
connected to a radio network in accordance with a registered request for information 
protection issued from the terminal. When the terminal is lost, if the owner of the 
portable terminal requests information protection of the security controller, an information 
protection instruction is sent through the radio network to the portable terminal, and 
important information in the terminal is removed and recovered to the security controller 
and nullified by means of an exclusive program inside the portable terminal. 



EFFECTS 



Important information can be removed even if a portable terminal is lost, thereby 
prohibiting misuse. 
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CLAIMS 

1 . A portable terminaJ device comprising radio communication means, output means, input means, 

memory means for storing user data, and data processing means for writing and reading user data with 
respect to said memory means, outputting information to said output means and exchanging information 
with other devices through said radio communication means in response to user operation inputs from 
said input means; characterized by comprising: 

means for storing verification information for verifying information protection requesters with 
respect to data stored in said memory means; and 

information protecting software containing a predetermined data processing procedure for 
checking the validity of an information protection request from the correspondence relationship between 
verification information included in a information protection instruction message received by said radio 
communication means and verification information prestored in said memory means, and if confirmed to 
be valid, nullifying specific user data stored in said memory means; 

said data processing means running said information protecting software in response to a notice 
from said radio communication means to nullify said specific user data and prohibit use by other parties. 

2. A portable terminal device as recited in claim 1 , characterized in that said memory means 
comprises a general information region and a protected information region; and 

said data processing means nullifies the user data stored in said protected information region 
by running said information protecting software. 

3. A portable terminal device as recited in claim 1, characterized in that said information 
protecting software prepossesses file identificadon information for the user data to be protected which is 
stored in said memory means, and 

said data processing means nullifies the user data stored in said protected information region 
by running said information protecting software. 

4. A portable terminal device ac recited in any one of claims 1-3, characterized in that said 
information protecting software includes a procedure for sending said user data to the transmission source 
of said information protection instruction message prior to nullifying the user data; and 

said data processing means, by running said information protecting software, collects specific 
user data in another device, then nullifies it. 

5. A portable terminal device as recited in any one of claims 1-3, characterized in that said 
information protecting software includes a procedure for selectively sending said user data to the 
transmission source device of said information protection instruction message in response to a processing 
category code included in said information protection instruction message; and 
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said data processing means, by running said information protecting software, performs a 
removal operation of the user data selectively to recover to another device, then nullifies it. 

6. A portable terminal device as recited in claim 4 or 5, characterized in that said information 
protecting software nullifies said user data by deleting the data. 

7. A portable terminal device as recited in claim 4 or 5, characterized in that said information 
protecting software nullifies said user data by means of data conversion. 

8. A portable terminal device as recited in any one of claims 1-7, characterized by comprising 
power supply control means for automatically turning on the power supply to said data processing means 
and said memory means in response to an interruption signal outputted from said radio communicating 
means upon receiving said information protection request message. 

9. A portable terminal information protecting method characterized by comprising: 

a step of registering in a security control device security control data necessary for protection 
of user information held by the portable terminal; 

a step of an owner of a portable terminal requesting said security device to perform information 
protection with respect to a lost portable terminal; 

a step of the security control device which has received said information protection request 
generating an information protecting instruction message based on pre-registered security control data, 
and sending it through the radio network to said lost portable terminal; and 

a step of the portable terminal which has received said information protection message 
processing predetermined user information held in said terminal to prohibit use by others. 

10. A portable terminal information protecting method as recited in claim 9, characterized in that 
said security control device checks whether or not communications by the radio network are possible for 
the portable terminal requesting information protection; confirming that it is in a communicable state, and 
sending said information protection instruction message. 

11. A portable terminal information protecting method as recited in claim 10, characterized in that 
said security control device checks whether or not communications by the radio network are possible for 
the portable terminal requesting information protection; and if in an incommunicable state, repeats the 
check of whether radio communications with said portable terminal are possible with a predetermined 
repetition pattern. 

12. A portable terminal information protecting method as recited in claim 9, characterized in that 
said security control device inquires of a mobile terminal data management device connected to the radio 
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network as to the state of the portable terminal requesting information protection; 

said mobile terminal data management device receiving said inquiry notifies said security 
control device as to the presence of a position registration of said portable terminal, and if the current 
position is unregistered, records that a state inquiry has been received for said portable terminal, and 
notifies said security control device when said portable terminal's position is registered; and 

said security management device sends said information protection instruction message in 
response to the notification from said mobile terminal data management device. 

13. A portable terminal information protecting method as recited in any one of claims 9-12, 
characterized in thai: 

security management data registered in said security control device includes address 
information of the portable terminal, registrant identification information and registrant verification 
information; when requesting said information protection, the requester gives his own identification 
information and verification information; and said security control device checks the validity of said 
requester based on the given verification information and the information already registered as security 
management data, and if confirmed to be valid, generates and sends said information protection 
instruction message. 

14. A portable terminal information protecting method as recited in claim 13, characterized in that 
the information protection instruction message sent firom said security control device includes said 
verification information; and 

the portable terminal which has received said information protection instruction message 
checks the validity of said received message based on verification information extracted from said 
received message and verification preset inside said portable terminal, and if validity is confirmed, 
executes data processing for prohibiting use of said predetermined user information by others. 

15. A portable terminal information protecting method as recited in any one of claims 9-14, 
characterized in that the portable terminal which has received said information protection instruction 
message performs data processing of predesignated user information in a predetermined memory area to 
prohibit use by others. 

16. A portable terminal information protecting method as recited in any one of claims 9-14, 
characterized in that the security management data registered in said security control device includes file 
identification information for specifying information to be protected, and said security control device sets 
said file identification information in said information protection instruction message; and 

the portable terminal which has received said information protection message performs data 
processing of the user information specified by the file identification information in the received message 
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to prohibit use by others. 

17. A portable terminal information protecting method as recited in any one of claims 9-16, 
characterized in that the portable terminal which has received said information protection instruction 
message performs data processing to prohibit use by others after sending said predetermined user 
information which is to be protected to said security control device. 

18. A portable terminal information protecting method as recited in claim 17, characterized in that 
the portable terminal which has received said information protection instruction message sends said 
predetermined user information to be protected to said security control device in a state of encryption by 
means of an encryption key designated in said message. 

19. A portable terminal information protecting method as recited in any one of claims 9-18, 
characterized in that the portable terminal which has received said information protection instruction 
message prohibits use by others by deleting said predetermined user information to be protected. 

20. A portable terminal information protecting method as recited in any one of claims 9-18, 
characterized in that the portable terminal which has received said information protection instruction 
message prohibits use by others by performing data conversion on said predetermined user information to 
be protected. 

21. A portable terminal information protecting method as recited in any one of claims 9-20 
characterized in that the registration of said security management data to said security control device is 
performed from the portable terminal device to be protected through a radio network. 

22. A portable terminal information protecting method as recited in any one of claims 9-21, 
characterized in that the information protection request to said security control device is performed using 
a telephone. 

23. A portable terminal information protecting system characterized by comprising a portable 
terminal, a radio network, and a security control device connected to said radio network; 

said security control device comprising memory means for storing security management data 
relating to portable terminals, and message generating-sending means for generating a data protection 
instruction message based on said security management data and sending this through said radio network 
to said portable terminal in response to a data protection request from the owner of a portable terminal 
which has been lost; and 

a portable terminal which has registered security management data with said security control 
device comprising radio communication means for communicating with said radio network, data 
processing means and specialized software to be executed by said data processing means in response to a 
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data protection instruction message received by said radio communication means. 

24. A portable terminal information protecting system as recited in claim 23, characterized in that 
said security control device comprises determining means for determining, upon receiving a data 
protection request from the owner of said portable terminal, whether or not to accept said protection 
request based on personal identification information given by said owner and personal verification 
information preregistered as said security management data, and generating and sending said data 
protection instruction message for data protection requests determined to be acceptable. 

25. A portable terminal information protecting system as recited in claim 24, characterized in that: 
the message generating-sending means of said security control device sends said data 

protection instruction message with personal verification information preregistered as said security 
management data included in said message; 

said portable terminal comprises determining means for determining whether or not it is 
possible to respond to said data protection instruction message based on personal verification information 
included in the received data protection instruction message and personal verification information 
prestored in said portable terminal; and 

performs data processing of said specific data in response to a data protection instruction 
message for which said determining means has determined that response is possible. 

26. A portable terminal information protecting system as recited in any one of claims 23-25, 
characterized in that said portable terminal radio communication means comprises power supply control 
means for discriminating said data protection instruction message and automatically turning on the power 
supply to said data processing means. 

27. A portable terminal information protecting system as recited in any one of claims 23-26, 
characterized in that the specialized software of said portable terminal, after transfer of said specified data 
to said security control device, invalidates data with respect to others by means of data deletion or data 
encryption. 

28- A portable terminal information protecting system as recited in claim 27, characterized in that 

said portable terminal comprises means for encrypting data transferred to said security control device. 

DETAILED DESCRIPTION OF THE INVENTION 
Technical Field 

The present invention relates to a portable terminal and portable terminal information protecting method, 
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more specifically to a mobile terminal comprising a microprocessor, memory mean sand radio 
communication means, and a method for protecting user information stored in the memory. 

Conventional Art 

Due to improvements in electronics technology such as semiconductor memories and microprocessors, 
portable terminal devices known as electronic notebooks, personal digital assistants (PDA's) and new 
portable information tools are being put into practice in addition to notebook-type personal computers. 
In particular, portable terminal devices which have become more compact and lightweight are able to be 
put into the pocket of one's jacket and readily carried, and their manner of use is also diversifying with 
data input/output operations possible while moving, and exchange of data with the office-side information 
processing system from a remote location using communication capabilities. 

Thus, since these portable terminal devices can be carried outside the office or put inside a bag or a 
pocket to be carried, the chances of loss or misplacement due to carelessness or falling into someone 
else's hands against the owner's intentions also grow, thus increasing the risk of information stored in the 
terminal device being seen or abused by a third party. Conventionally, as a method for protecting 
information requiring a high level of security, a password is appended to an information file whose access 
is to be restricted, such that when a user attempts to look at this information file, the system prompts the 
input of the password, allowing access only when the inputted password matches a preregistered valid 
password. 

Problems to be Solved by the Invention 

Portable terminals are primarily used as the possessions of individuals, and are not assumed to be shared 
by an unspecified plurality of users such as individual terminals equipped inside offices, nor lent to others. 
For this reason, it is rare for the owner of a portable terminal to pay any heed to the protection of user 
information inside a portable terminal while the terminal is under his own control. Additionally, the 
owners of portable terminals desire that the information stored in the portable terminals be readily at hand 
as their own possessions, so that even if there is information which is not for others' eyes, privacy 
protection measures such as passwords mentioned above, which are procedurally troublesome, are often 
not taken so that the terminals can be used in an operating environment enabling continuous and quick 
access to the required information. Owners of portable terminals usually become aware of the need to 
prevent viewing and use of information stored in the terminal by others only after they lose their 
terminals. 

The purpose of the present invention is to offer a portable terminal device, a terminal information 
protecting method and terminal information protecting system capable of prohibiting abuse of 
information which is important to the owner which remains inside the terminal after the terminal has been 
lost. Another purpose of the present invention is to offer a portable terminal device, terminal 
information protecting method and terminal information protecting system enabling user information 
important to the owner which remains inside the terminal after the terminal has been lost to be recovered 
into the hands of the owner. Another purpose of the present invention is to offer a portable terminal 
device, a terminal information protecting method and terminal information protecting system wherein 
information stored in a terminal can always be readily accessed, but capable of protecting user 
information important to the owner which remains inside the terminal after the terminal has been lost. 

Means for Solving the Problems 

In order to achieve the above-described purposes, the portable terminal information protecting method 
and protecting system of the present invention are characterized by registering in a security control device 
security control data necessary for protection of user information held by the portable terminal; an owner 
of a portable terminal requesting the security device to perform information protection with respect to a 
lost portable terminal; the security control device which has received the information protection request 
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generating an information protecting instruction message based on pre-registered security control data, 
and sending it through the radio network to the lost portable terminal; and the portable terminal which has 
received the information protection message processing predetermined user information held in the 
terminal to prohibit use by others. 

According to an embodiment of the present invention, the above-described security control device checks 
whether or not communications by the radio network are possible for the portable terminal requesting 
information protection; confirming that it is in a communicable state, and sending the information 
protection instruction message. Prior to sending the information protection instruction message, the 
security control device inquires of a mobile terminal data management device connected to the radio 
network as to the state of the portable terminal requesting information protection; the mobile terminal 
data management device receiving the inquiry notifies the security control device as to the presence of a 
position registration of the portable terminal, and if the current position is unregistered, records that a 
state inquiry has been received for the portable terminal, and notifies the security control device when the 
portable terminal's position is registered; and the security management device sends the information 
protection instruction message in response to the notification from the mobile terminal data management 
device. 

In the present invention, the security management data includes portable terminal address information (an 
address or telephone number on the radio network), registrant identification information and registrant 
verification information. By preregistering this type of management data in the security control device, 
at the time of a request for information protection, it is possible to have a requester (owner of a lost 
portable terminal) give his own identification information and verification information, to enable the 
security control device to collate the given information with the information which has previously been 
registered as security management data to check the validity of the requester, to enable the information 
protection instrucdon message to be generated and sent only when validity has been confirmed. 
Additionally, it is possible to set the verification information in the information protection instruction 
message sent to the portable terminal, and to have the portable terminal which received the information 
protection instruction message check the validity of the received message based on the verification 
information extracted from the received message and the verification information preset in the portable 
terminal, so as to perform data processing for protection of the information only in the case where validity 
has been confirmed. 

The portable terminal according to the present invention is a portable terminal device comprising radio 
communication means, output means, input means, memory means for storing user data, and data 
processing means for writing and reading user data with respect to the memory means, outputting 
information to the output means and exchanging information with other devices through the radio 
communication means in response to user operation inputs from the input means; characterized by 
comprising: means for storing verification information for verifying information protection requesters 
with respect to data stored in the memory means; and information protecting software containing a 
predetermined data processing procedure for checking the validity of an information protection request 
from the correspondence relationship between verification information included in a information 
protection instruction message received by the radio communication means and verification information 
prestored in the memory means, and if confirmed to be valid, nullifying specific user data stored in the 
memory means; the data processing means running the information protecting software in response to a 
notice fi-om the radio communication means to nullify the specific user data and prohibit use by other 
parties. 

In order to specify the user data to be protected, the portable terminal of the present invention, for 
example, divides the memory means into a general information area and a protected information area, 
such as to nullify the user data stored in the protected information area for information protection. As 
forms for protection of the user data, it is possible to transfer the user data to another device, such as the 
transmission source of the information protection request message, enabling it to be recovered into the 
hands of the terminal owner later. In this case, the user data may be transferred in an encrypted state. . 
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Embodiments of the Invention 

Fig. 1 shows the overall structure of a system for achieving a portable terminal information protecting 
method according to the present invention using a radio netv^ork. In the drawing, reference number 1 
denotes a radio network composed of a plurality of radio base stations 12 (12A-12N) interconnected 
through a wire network 5 and a database system 11 storing mobile terminal control data, and 10 denotes a 
security controller (security server) connected to the radio network. 14 (14A-14M) denotes a mobile 
terminal using the radio network, and the portable information terminal (hereinafter referred to simply as 
a portable terminal) to which the present invention is directed aside from a normal mobile telephone is 
one type of such mobile terminals. In the following embodiment, a case of applying a PHS (Personal 
Handyphone System) as a radio network 1 shall be explained. A stationary terminal 18 and other public 
telephone communication networks are connected to the wire network 5 through a switching system 
which is not shown. However, it is possible to use another system enabling communication of messages 
containing computer commands and data between the portable terminal and security controller in the 
above-described radio network. 

The above-described database system (PHS system DB) 1 1 manages position information and verification 
information of the mobile terminals (PHS telephones and portable terminals with internal PHS functions) 
as mobile terminal control data, and in the present embodiment, the security controller 10 is connected to 
the database system. The security controller 10 registers security management data required for 
information protection of the portable terminal 14 in response to a security registration request from the 
owner of a portable terminal 14, and upon receiving a portable terminal information protection request 
from the user through a conrmiunication device of a telephone 1 8 or the like, performs verification of the 
user and identification of the portable terminal based on the pre-registered security management data, and 
through the radio network system, obtains the current position information of a target terminal and 
performs a protection operation on the information as shall be described below. The position 
information of the portable terminal 14 is obtained by accessing the PHS system DB 11, and information 
protection is achieved by sending an information protection instruction to the portable terminal 14, and 
performing the information protection program contained in the portable terminal. 

Fig. 2 shows the procedure for registration of information protection to the security controller 10 by 
means of the owner of a portable terminal. When a registration operation 57 is performed at the portable 
terminal 14, it is connected to the security controller 10 and a registration request 51 is sent to the security 
controller 10. In response to the registration request 51, the security controller 10 runs a registration 
acceptance operation 61 and sends a registration information request 52 to the portable terminal 14 
making the request. The portable terminal 14 inputs information necessary for information protection of 
the owner in response to the registration information request, and sends this as registration information 53 
to the security controller 10. The security controller 10 analyzes the above-described registration 
information 53, then sends a registration information confirmation request 54 to the portable terminal 4. 
Once the owner confirms that there are no errors in the registration content, the registration confirmation 
response 55 is sent from the portable terminal 14 to the security controller 10. When the security 
controller 10 receives the registration confirmation response, it performs a registration information 
confirmation operation 63, registers the registration information 53 in the registration data table, and 
sends a registration OK response 56 to the portable terminal 14 to end the registration procedure. 
Similarly, at the portable terminal side, the registration OK response 56 is received, and the user confirms 
this to end the registration process. 

Fig. 3 shows a message format 70 for portable terminal information protection transmitted between the 
portable terminal and the security controller. The message 70 is composed of five fields, that is, the 
system ID 71, the operation ID 72, the data quantity 73, the data content 74 and the CRC (cyclic 
redundancy check) 75. The system ID 71 is set with a code indicating that this message is for portable 
terminal information protection. The operation ID 72 shows the type of message, having set therein an 
identifier for identifying the registration request 51, registration information request 52 and the like. 
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The data quantity 73 indicates the amount of data in the subsequent data content field 74 in units of bytes, 
and the CRC 75 is used for a data error check from the operation ID field 72 to the data content field 74. 

The data content 74 of the registration information request message 52 sent from the security controller 
10 to the portable terminal in response to the registration request 51 contains a required data template 79 
and an encryption key A: 80 as shown in the data format 76. The required data template 79 is data for 
displaying to the owner of a portable terminal the information categories required as registered 
information 53, and is composed of a character string representing the information categories to be 
inputted and the byte length thereof. The encryption key A: 80 is, for example, a public encryption key 
in a public key encryption format, wherein the portable terminal 14 sends the registered information 53 to 
the security controller in a state of encryption using the above encryption key A. 

The data content 74 of the registered information message 53, as shown in the data format 77, contains a 
portable terminal identifying ID 81, a portable terminal telephone number 82, a registrant ID 83, 
verification information 84, processing number 85 and encryption key B:86. The portable terminal 
identifying ID 81 is a serial number of the portable terminal, which is used when the security controller is 
communicating with the portable terminal to determine whether it is communicating with the correct 
portable terminal. The portable terminal telephone number 82 is a telephone number of a PHS 
contained in the portable terminal, such that the security controller 10 uses this telephone number to call 
up a lost portable terminal. The registrant ID 83 is the ID of the owner of the portable terminal, and the 
security controller specifies the user and security management data using this ID when performing a 
portable terminal information protection service. The verification information 84 is secret information 
(password) for confirming whether or not the one requesting a portable terminal information protection 
service is actually the registrant. The processing number 85 indicates the state of terminal information 
protection. The form (type) of terminal information protection is coded, for example, by setting 
"processing number = 1" if the information held by the terminal (protected information) is to be deleted, 
or setting "processing number = 2" if the information held by the terminal is to be deleted after the 
protected information has been recovered (transferred) to the security controller side, the form of 
information protection being pre-registered by the owner of the terminal. The encryption key B:86 is a 
public encryption key of a public key encryption format, used for encrypting information sent from the 
security controller to the portable terminal. 

As shown in the data format 78, the data content 74 of the registration OK response 56 includes a 
registrant ID 83 and the processing number 85. The processing number 85 is designated by the user in 
the registration information message 53, and indicates a processing number accepted at the security 
controller side. 

Fig. 4 illustrates an example of a data input screen displayed on a portable terminal for the registration 
procedures. 90 denotes a registration start screen, 91 denotes a registration information input screen and 
92 denotes an owner confirmation screen, wherein the terminal owner inputs data sequentially in 
accordance with the displayed content. In the registration start screen 90, when "security registration" is 
selected from the menu 93, a registration window 94 is displayed. The registration window 94 has an 
emergency contact number used when requesting information protection when the terminal is lost, and 
"YES" and "NO" buttons for indicating whether information registration procedures are to be executed. 
The owner of a terminal which is to run an information registration process records this emergency 
contact number in a memo, and selects the "YES" button. Due to this operation, the portable terminal 
automatically dials the security controller 10, and when a connection is established, a registration request 
51 is sent from the portable terminal to the security controller 10. The telephone number which is 
automatically dialed above is different from the above-described emergency contact telephone number. 
Additionally, the emergency contact telephone number can be made to be verifiable in the manual for the 
information protecting software loaded in the portable terminal. 

The registration information input screen 91 has a registration information input window 95 formed based 
on the necessary data template 79 sent from the security controller 10 in the registration information 
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request message 52, where the terminal owner inputs data in a plurahty of categories necessary as 
registration information (security management data records). When the input to all of the data 
categories has been completed and the owner selects the send button, a registration information message 
53 having the content of the data format 77 as the data content 74 is generated, and sent to the security 
controller 10. The user confirmation screen 92 is a screen displayed by the portable terminal when a 
registration OK response 56 has been received from the security controller 10, displaying a user 
confirmation window 96 including an end button and registration information. When the owner selects 
the end button, the registration process is completed. At this time, a portion of the security management 
data, such as the registrant ID and password are stored in a non-volatile memory inside the portable 
terminal. 

Fig. 5 shows an example of a flow chart for a processing program run by the security controller 10 during 
registration processing. Blocks 61, 62 and 63 correspond respectively to the registration acceptance 
operation 61, the registration information acceptance operation 62 and the registration information 
confirmation operation 63 shown in Fig. 2. the security controller 10 is in a state of awaiting incoming 
calls from the portable terminal (step 101), and repeats the standby state by means of a continual process 
(102) as long as there are no incoming calls. If a message is received, the message data (input data) is 
checked (103), and it is determined whether or not the received message is a registration request 5 1 (104). 
If a registration request 51, a registration information request data 52 is prepared, and after transmitting 
this to the portable terminal (106), the reception of the next message if awaited (107). If the above- 
described first message is not a registration request 51, another process 105 is performed. 

When the registration information 53 which is encrypted with the encryption key A is received as the next 
message, the secret encryption key corresponding to the above encryption key A is applied to decode and 
analyze (108) the registration information, after which the registration information confirmation request 
message 54 is prepared and sent to the portable terminal (109), after which the next message is awaited 
(110). The data content 74 of the above-described registration information confirmation request 
message 54 contains the data content 77 of the registration information message 53 received by the 
security controller 10, When the registration confirmation response 55 is received from the portable 
terminal, the registration information which has already been received is registered as security 
management data (113), and a registration OK response is prepared and sent to the portable terminal (114). 
It is also possible to send a message having the same data content as the registration information message 
as a registration confirmation response 55 from the portable terminal side, and as indicated by the dashed 
line, to decode and analyze the data content of the received registration confirmation message 55, then 
comparing with the already received registration information (112), and performing the registration 
process (113) in the event of a match (113) and rerunning the process form the registration information 
request step (106) in the even of a non-match. 

Fig. 6 shows the operational procedure of a protection system in the case where the owner of a lost 
portable terminal dials the emergency contact telephone number by means of, for example, push-button 
dialing (telephone), and requests information protection of the security controller 10. Here, an 
operational example shall be explained wherein at the time the request for information protection is 
received, the lost portable terminal is in a state of communicability with the PHS system, and the security 
controller 10 succeeds in accessing the lost portable terminal. Additionally, an operational flow chart for 
the security controller 10 which runs the operations S1:134-S5:138 in Fig. 6 and the operations S6:158- 
S7:159 in Fig. 7 to be described below are shown in Fig. 10, and the operations shall be described 
hereafter with reference also to the operational steps of Fig. 10. 

When the owner who has realized that the portable terminal has been lost dials the telephone number of 
the emergency contact with the telephone 18 (operation Ul:131), a connection is established with the 
security controller 10. In this case, the call control signal issued from the telephone when the call is 
made is a protection request 121. On the security controller 10 side, the incoming call to the above- 
described emergency telephone number is connected to the audio response system, and as the first 
automatic response message (verification confirmation message) 122, an audio message with the content, 
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for example, of "Please enter registrant ID and #, followed by password and #" is outputted (operation 
Sl:134, steps 101-205 of Fig. 10). The owner uses the numerical keys and # button in reply to the above 
audio message to enter the registrant ID and password (operation U2:132). The inputted data is sent as 
verification data 123. 

The security controller 10, upon receiving this verification data 123, retrieves the registered security 
management data record having the same ID as the registrant ID and determines whether the received 
password matches with the registered verification information 84, and after confirming that the requester 
of information protection is someone who is registered, outputs the requested confirmation message 1 24 
(operation S2:135, steps 206-208 of Fig. 10). The above request confirmation message 124 may, for 
example, consist of: "Now commencing information protection operation. If the portable terminal is not 
found, the search operation shall be continued. If not found immediately, you will be contacted at a later 
date. Please press the telephone number to be contacted followed by the # button. Please wait.'" 

If the owner inputs the telephone number and presses the # button (operation U3:133), the security 
controller indicates a PHS telephone number registered in the security data record for the PHS system DB 
11, and sends a portable terminal search request 127 (operation S3:136, steps 209-211 of Fig. 10). The 
PHS system DB 11, upon received the above search request (127), searches the database to find whether a 
portable terminal having the relevant PHS telephone number has its position registered, and sends the 
result to the security controller 10 as a portable terminal search response 128 (operation Nl:139). 

If the target portable terminal has been position-registered, the security controller 10 indicates for the 
portable terminal the type of information protection with a pre-registered processing number 85, and 
sends an information protection instruction 129 (operation S4:137, steps 212-214 of Fig. 10). The 
portable terminal 14 which has received the information protection instruction 129 runs the information 
protection program, and upon completion, sends a protection completion report 1 30 along with protected 
data as needed to the security controller 10 (operation PI : 140). 

Upon receiving this protection completion report 130, the security controller 10, immediately if there is 
no protected data to be transferred, and after storing this in correlation with the security management data 
record if there is data to be transferred (transferred data record), responds to the information protection 
completion notification 126 (operation S5:138, steps 215-208 of Fig, 10) to end the procedure. The 
above-mentioned information protection completion notification 126 is an audio message consisting, for 
example, of "the protection of portable terminal information is complete", with an audio message to the 
effect that protected data has been recovered in the case where it has. 

In the above embodiment, the portable terminal search request operation S3 with respect to the PHS 
system DB and the reply operation Nl thereto are effective when the PHS system DB, in response to the 
portable terminal search request 127, finds the base station in which the target portable terminal is 
position-registered, retrieves the bases station location (address) corresponding to the identifier of the 
base station, and for example, indicates the rough current position of the target portable terminal as a cell 
radius centered on the above base station location, and notifies the security controller thereof by means of 
the above portable terminal search response 128, upon which the security controller notifies the search 
requester of the above current position information. Additionally, as shown in Fig. 8,if the portable 
terminal is not in a state of communicability when the owner of the portable terminal requests information 
protection, it becomes effective when the position registration of this terminal in the radio network is 
detected and an information protection instruction is automatically issued. 

If this type of terminal position information service for temninal owners is absolutely unnecessary, it is 
possible to omit the terminal search request 127 to the PHS system DB, and for the security controller 10 
to attempt to setup a call (connection) to the target terminal with the above operation S3 regardless of 
whether or not the target portable terminal is position-registered, and to run operation S4 when a 
connection is established. If the target terminal is in a non-communicable state, the security controller 
10 can be made to automatically repeat the calls in a predetermined repetition pattern. 
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Fig. 7 shows an operational example for the case where the lost portable terminal cannot be found at the 
time the request for information protection is received as shown in Fig. 6. IN the operational sequence 
of Fig. 7, the procedure until the PHS system DB 11 sends the security controller 10 a portable terminal 
search response 128 is the same as in Fig. 6. In this case, when failing to confirm the current position of 
the portable terminal for which there has been a search request from the security controller 10, it is useful 
to put up a flag indicating that this is a terminal which is being sought by the security controller 10 in the 
information record of the portable terminal at the PHS system DB 1 1 side. In this example, the security 
controller 10 receives a portable terminal search response 128 from the PHS system DB 11 indicating that 
the position confirmation has failed, and in operation S4:137, sends the owner an audio message 
(continual confirmation message) 151 consisting, for example, of "The portable terminal has not been 
found. The terminal will continue to be monitored. If you wish to discontinue the terminal search and 
information protection now, please press 2#. If you wish to continue, please press 1#." (step 219 in Fig 
10). 

If the owner selects "2#", the security controller 10 outputs the audio message "The service is 
completed." (operation S6:158, steps 220, 221, 227 of Fig. 10) and the communications are terminated. 
If the owner selects "1#", in the above-described operation S6:158, an audio message (contact 
confirmation message) 153 consisting, for example, of "Please confirm that your contact telephone 
number is XXXXXXXXX. If correct, please press 1#. If you wish to change the telephone number, 
please press 2#, then the telephone number, and #" (step 221, 222 of Fig. 10). When the owner performs 
the response operation with respect to the confirmation message (operation U6:157), the security 
controller analyzes the content of the contact response 1 54 due to the above response operation, and if 
"1#", sends a termination message 155 consisting of "The service is completed.", and the communication 
is terminated. If "2#" and the telephone number are inputted in response to the above confirmation 
message, the telephone number confirmation message is resent, and the same operations are repeated 
(operation S7:159, steps 223-227 in Fig. 10). 

Fig. 8 shows the operational procedure for a continual protection process for automatically finding lost 
portable terminals. Additionally, Fig. 11 shows an operational flow chart of a security controller 10 
corresponding to the operations S8:166 and S9:167 of Fig. 8, which operation shall be described with 
reference to Fig. 11. When the lost portable terminal 14 is turned ON, the internal PHS telephone 
function issues a position registration request 161 to a base station, and the PHS system DB 11 performs a 
terminal position registration (operation 168). When the PHS system DB 1 1 receives the position 
registration information 161 fi-om any base station, it finds the flag indicating that the terminal is being 
sought by the security controller 10 in the information record of the portable terminal during the position 
registration operation, and sends the security controller 10 a position registration notification 162 
indicating the lost terminal position. 

The security controller 10 is in a state of awaiting a position registration notification from the PHS system 
DB (step 101 of Fig. 11), and upon receiving the position registration notification 162, begins 
communicating with the lost portable terminal 14 by means of the PHS telephone system, sending the 
information protection instruction 129 (operation S8:166, steps 243-245 of Fig. 11). The portable 
terminal 14 responds to this information protection instruction 129, runs an information protection 
program such as shown in Fig. 6, and sends the security controller 10 a protection terminal report 130. 
Upon receiving this protection terminal report 130, the security controller 10, as indicated by the 
operation S9:167, stores any protection data that exists (records transfer data (steps 246-248 of Fig. 11)), 
and after recording the information protection termination in the security management data record, 
automatically dials the contact number of the terminal owner stored in the above data record, and gives an 
information protection report 165 with an audio message (steps 249-251 of Fig. 1 1). IN the aboye 
embodiment, the PHS system DB 14 checks for the presence of an information protection request and 
automatically notifies the security controller, but in the case where it is not desirable to add such a special 
function to the PHS system DB 14, it is possible for the security controller 10 to obtain a cue for the 
operation 8:166 by periodically calling the portable terminal. 
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Fig. 9 shows an example of the format of a message 70 transmitted between the portable terminal, 
security controller and PHS system database when running the above information protection operation. 
The basic structure of the message format 70 is similar to that shown in Fig. 3, with the data content 74 
differing according to the type of message. 301 denotes the data content of the portable terminal search 
request message 127 shown in Figs. 6 and 7. It consists of the two fields of a processing instruction 
message 305 and a portable terminal telephone number 79, with a character string indicating the content 
of the request to the PHS system DB 11 being set in the processing instruction message 305, and the PHS 
telephone number of the portable terminal to be found being set in the portable terminal telephone 
number 79. 

302 denotes the portable terminal search response 128 shown in Figs. 6 and 7, and the data content 74 of 
the message used in the position registration notification 162 shown in Fig. 8. The data content is 
composed of the three fields of the presence/absence of the portable terminal 310, the portable terminal 
telephone number 82 and the position information 306, with the PHS telephone number of the portable 
terminal which is to be found being set in the portable terminal telephone number 82, position 
information indicating the connection point (base station) inside the PHS system where the portable 
terminal is located being set as the position information 306, this position information enabling the rough 
current position of the portable terminal to be known. 

303 denotes the data content 74 of the message of the information protection instruction 129 shown in 
Figs. 6 and 8, including a portable terminal identifier ID 81, a portable terminal telephone number 82, a 
registrant ID 83, verification information 84, a processing instruction 311 and an encryption key C:307. 
The portable terminal identifier ID 81, portable terminal telephone number 82, registrant ID 83, 
verification information 84 and processing number 85 are registered as security management data, and 
when the information protection instruction 129 is received, used for checking the reliability of the 
received message at the portable terminal 14 side. The encryption key C307 is a public encryption key 
according to the public key encryption format, the portable terminal using this encryption key C to 
encrypt the protection information sent to the security controller. 

304 denotes the data content 74 of the message of the protection completion report 1 30 shown in Figs. 6 
and 8, consisting of the two fields of a message type ID 308 and data 309. The message type ID 308 is 
set, for example, to "0" when the following data field 309 contains only a protection termination report 
code, "1" when it contains a protection termination report code and protected data and there is no more 
data, and "2" when there is data following the protected data. The content of the data field 309 is 
encrypted using the encryption key C307. 

Fig. 12 is an operational flow chart of a PHS system DB running the operations Nl:139 and N2:168 in 
Figs. 6, 7 and 8. The PHS system DB 11 checks the received messages (step 261), and if a received 
message is a position registration request, runs the operation N2: 168. In this case, a normal position 
registration operation is performed (step 271), and if this portable terminal is found to be such as to have 
a search request issued by the security controller, prepares notification information for the security 
controller (position notification 162 of Fig. 8) (272), and after sending this to the security controller (273), 
returns to a message reception standby state. 

When a portable terminal search request 127 is received from the security controller, the operation 
Nl:139 is performed. In this case, the portable terminal search request is first analyzed (264), and the 
database information is searched based on the portable terminal telephone number designated by the 
search request (portable telephone number 79 indicated in Fig. 9) (265), and a check is made as to 
whether or not the target terminal has its position registered (266). If the target terminal has its position 
registered, a "1" indicating the existence of the portable terminal is placed in the field 310 of the data 
content format 302 shown in Fig. 9, the telephone number of the target portable terminal is placed in the 
field 82, and a response message 128 in which the base station information accommodating the above 
target portable terminal is prepared in the field 306 (267), and the result is sent to the security controller 
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(270). If the position of the target portable terminal is not registered, a response message 128 with a "0" 
set in the above fields 310 and 306 is prepared (268), and this is sent to the security controller (270). 

Fig. 13 is a flow chart showing the details of the data protection operation P in the portable terminal to 
which the present invention is applied. When interrupted by the communication control portion while in 
a normal data processing operation state 282 (281), the portable terminal starts up special software for 
data protection stored in the ROM in the portable terminal, and analyzes the transmitted message (284). 
When the PHS telephone function and communication control portion are in a reception standby state and 
the power of the CPU main body portion is not turned on, the above-described communication message 
analysis is performed after automatically turning the CPU power on. 

If the message received at the communication control portion which caused the interruption is an 
information protection instruction 129 from the security controller, then the data portion is encrypted by 
the encryption key B:86 as described in Fig. 3, so that in this case, the content of the message is decoded 
using a secret key pre-stored in the ROM corresponding to the encryption key B:86. If the above- 
described communication content is not an information protection instruction 129 (284), then the normal 
communication procedure (282) is performed, and if an information protection instruction, a verification 
check is performed (286). The verification check is performed by comparing the verification 
information contained in the information protection instruction (content of the field 85 in Fig. 9) and the 
proper owner verification information stored inside the portable terminal when registering for portable 
terminal information protection (password). If there is a problem as a result of the verification, then the 
subsequent procedures are skipped and the procedure is returned to step 28 1 . 

If there is no problem in verification, then the content of the protection instruction is analyzed (287), the 
necessity of data transfer is determined from the value in the processing number field 85 (288), and the 
procedure advances to step 291 if there is no need for data transfer. If data transfer is required, then the 
encryption key in the information protection instruction (encryption key C:307) is used to encrypt the 
terminal information (protected data) (289), and after the encrypted terminal information is sent to the 
security controller (290), the procedure advances to step 291. In step 291, a terminal information 
privacy protection (invalidation or overwrite) procedure is performed (291). The data privacy protection 
can be achieved, for example, by deleting the terminal information from memory or by converting it to 
false data. When the data privacy protection is completed, a data protection completion message is sent 
to the security controller (292), the interruption is terminated and the original state is resumed. 

Fig. 14 shows the structure of a security controller 10. The security controller 10 comprises a CPU 20, a 
ROM 21, a RAM 22, a data file 23, a communication control portion 24, a communication interface with 
the PHS system DB 25, a communication interface 26 with the portable terminal, an audio control portion 
27 having an audio reply function, a telephone interface 28 and an internal bus 29. The CPU 20 controls 
the communication control portion 24 and audio control portion 27 according to a control program 
prepared in the ROM 21, and communicates with the PHS system DB through a communication interface 
25, with portable information terminals through a communication interface 26 and with telephones 
through a telephone interface 28. The RAM 22 is used as a work area for a program, and is used for 
temporary storage of data from a PHS system DB or portable terminal owner. The file device 23 is used 
to store security management data records, data removed from lost terminals, or information necessary for 
stationary protection processes. 

Fig. 15 is a block diagram showing the structure of a portable terminal 14. The portable terminal 14 to 
which the present invention is applied comprises a CPU 31, a ROM 32, RAMs 33 A and 33B, an auxiliary 
memory device 34, a display device (e.g. a liquid crystal display) 35, an input device 36, a power supply 
control portion 37, a communication interface 38, a communication control portion 39, a bus 40, a power 
supply control line 41 and a communication interruption control line 42. The CPU 31 passes data 
between the ROM 32, RAMs 33 A and 33B, the auxiliary memory device 34, the display device 35, the 
input device 36, and the communication interface 38 through the bus 40. Additionally, the power supply 
control portion 37 controls the power supplies of the various elements described above so as to turn them 
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on or off through the power supply control line 41 . In the present invention, the communication control 
portion 39 has functions for achieving PHS radio communications, such as for example, an antenna, a 
high frequency circuit, and PHS communication procedure control and communication content check 
means, such as to exchange communicated message data with the CPU 31 through the communication 
interface 38 for normal PHS communications, generate a communication interruption control signal to 
interrupt the CPU 31 or power supply control portion 37. 

The ROM 32 contains various types of software for achieving the functions of a portable terminal, and 
special software and control information for achieving terminal information protection according to the 
present invention. The RAMs 33A and 33B are backed up by a power supply, with the RAM 33A being 
for storage of normal data which does not require information protection, and the RAM 33B being used 
for storage of specific file data to be protected by applying the present invention. When interrupted by 
the communication control portion, the CPU of the portable terminal runs special software provided in the 
ROM 32, and if the interruption is due to reception of a terminal information protection instruction, runs 
the above-mentioned data recovery and protection procedures with the information stored in the RAM 
33B as the object. 

In the above embodiment, the information to be protected in each terminal is stored in a special memory, 
and the information protection operation is performed with respect to all information in this special 
memory when the terminal is lost, but the information protection can also be performed simply by 
specifying a data file name. For example, it is possible to manage the information which is to be 
protected using a special file name or a filed name with a specific abbreviation in each portable terminal, 
and to have the terminal owner specify a file name (or file discrimination information such as 
abbreviations) to be protected when requesting registration for information protection, store this in the 
above-described special software, and run the protection process on files with these special file names 
when an information protection instruction is issued. 

Additionally, in the embodiment, a terminal owner direcdy interacts with the security controller through a 
telephone, and the security controller side controls acceptance of information protection according to an 
audio response function, but it is possible to have the owner of the lost terminal access the security 
controller from another radio terminal having a text data transmitting function or another terminal 
connected to the network 5, so as to exchange the information required for terminal information 
protection in a data message format. Additionally, the information protection can be performed by 
having an agent at the security system side receive an information protection request reported by a normal 
telephone by the owner of a lost terminal access the security controller from a special terminal, and input 
the data such as passwords necessary for verification of the owner through the agent terminal. 

Effects of the Invention 

As is clear from the above explanation, the present invention does not require troublesome operations 
such as password input in order to confirm file access rights when using the portable terminal normally, 
but enables the terminal information to be protected or the information to be recovered when the portable 
terminal is lost. Additionally, if the terminal position registration function in the radio network is used 
for requesting information protection, the approximate current position of the lost terminal can be known, 
thus aiding in finding the lost terminal due to this position information. 



BRIEF DESCRIPTION OF THE DRAWINGS 



Fig. 1 A structural diagram of a network system for achieving portable terminal information 
protection according to the present invention. 



Fig. 2 A diagram showing an embodiment of the registration procedure for terminal information 
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protection. 

Fig. 3 A diagram showing an embodiment of a message format transmitted between the portable 
terminal and the security controller at the time of registration for terminal information 
protection. 

Fig. 4 A diagram showing an embodiment of a screen displayed on the portable terminal at the time 
of registration for terminal information protection. 

Fig. 5 A flow chart showing an embodiment of the procedures of the control program executed by the 
security controller at the time of registration for terminal information protection. 

Fig. 6 A sequence diagram showing an example of an information protection procedure run by the 
network executed when a terminal is lost. 

Fig. 7 A sequence diagram showing another example of an information protection procedure run by 
the network executed when a terminal is lost. 

Fig. 8 A sequence diagram showing another example of an information protection procedure run by 
the network executed when a terminal is lost. 

Fig. 9 A diagram showing an embodiment of a message format transmitted during information 
protection. 

Fig. 10 A flow chart showing an embodiment of a control program run by the security controller 
during information protection. 

Fig. 11 A flow chart showing another embodiment of a control program run by the security controller 
during information protection. 

Fig. 12 A flow chart showing an embodiment of a control program run a PHS database system during 
information protection. 

Fig. 13 A flow chart showing an embodiment of a control program run by a portable terminal during 
information protection. 

Fig. 14 A block diagram showing an example of the structure of a security controller. 

Fig. 15 A block diagram showing an example of the structure of a portable terminal. 

Description of Reference Numbers 

I radio network system 
5 wire network 

10 security controller 

I I PHS system database 
12 base station 

14 portable terminal 

18 telephone 

5 1 registration request 

52 registered information request 
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